Agent Skills Hub

WordPress Penetration Testing

Conduct automated security assessments of WordPress sites using WPScan, enumeration techniques, and vulnerability scanning for themes, plugins, and users.

auth-patterns

Implement secure backend authentication (JWT, OAuth, Sessions) and authorization (RBAC, ABAC) patterns, including password hashing, MFA, and security best practices.

threat-modeling-ics

Performs end-to-end OT/ICS threat modeling using Microsoft TMT exports and model files, mapping threats to MITRE ATT&CK for ICS, CWE, and CVSS v4.0 with automated risk-based prioritization.

sast-configuration

Automate SAST configuration and security scanning. Supports Semgrep, SonarQube, and CodeQL for DevSecOps, quality gate management, and vulnerability detection.

find-bugs

Perform automated security audits, bug detection, and code quality assessments on local branch diffs using a structured, checklist-driven verification process.

k8s-security-policies

Implement production-grade Kubernetes security using NetworkPolicy, RBAC, Pod Security Standards, and OPA Gatekeeper policies.

code-review

Perform comprehensive code reviews with a focus on security vulnerabilities, performance optimization, maintainability, and code correctness.

constant-time-analysis

Detects timing side-channel vulnerabilities in cryptographic code through static and dynamic analysis across multiple programming languages.

sarif-parsing

Parses and processes SARIF files from static analysis tools. Enables aggregation, deduplication, filtering, and CI/CD integration of scan results.

claude-rag-skills

A suite of professional tools for auditing, evaluating, chunking, and scaffolding production-ready RAG pipelines within Claude Code.

fastapi-auth

Implement secure session-based authentication in FastAPI with Argon2 hashing, database-backed sessions, and OAuth2 provider integration.

variant-analysis

Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, or performing systematic code audits.